This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
File:                     LpT_AwG-edgSYKxmrHNi762WikE.cer (raw, json)
Hash identifier:          Tm0lg7urN5oe8oA99eeVzRM8YT6tTV4a7dWMSkeWhwU=
Subject key identifier:   2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7CED832EBE924081B01E00C01D124615
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 04:18:19 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 42134
                          IP: 194.0.138.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:83:2e:be:92:40:81:b0:1e:00:c0:1d:12:46:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 04:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e94ff0301be79d81260ac66ac7362efad968a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:49:29:e2:f2:67:0a:d1:5b:e4:c3:b1:5d:
                    46:98:90:f4:80:c4:04:d7:0d:ba:f9:9b:e4:d0:66:
                    80:2c:53:85:41:c4:23:7d:49:51:b5:f6:5c:3e:64:
                    42:d8:df:6f:4b:30:9f:3f:95:ea:45:47:ec:ec:bd:
                    8b:27:17:7d:e6:c1:55:f3:2d:81:81:5e:4e:fd:e9:
                    d6:69:66:03:33:37:1c:6c:a9:92:fe:2f:92:70:89:
                    05:e9:89:85:f8:d3:f5:a7:f8:ed:76:ae:fe:b8:ba:
                    51:9d:a2:9a:e0:dd:62:24:12:0a:62:2a:46:85:6b:
                    fb:80:22:ea:2c:cd:8f:1d:d3:61:c2:c2:34:d4:32:
                    bf:6a:06:60:6e:de:03:89:1f:0a:54:7f:27:79:1b:
                    d3:ef:b6:b0:8c:66:22:37:94:a0:bc:14:b9:d8:96:
                    fc:46:67:94:5d:dc:ad:d7:4c:e3:56:7a:5c:26:cb:
                    3a:37:f0:bf:59:2f:5b:73:fb:92:47:ba:ab:b6:6f:
                    4c:ca:2b:15:f2:85:b3:09:7b:f6:5d:7b:d9:ca:22:
                    d8:bc:d8:1b:ba:b4:be:6c:b6:ed:8b:7f:1c:71:86:
                    3f:72:66:be:a5:35:e8:16:22:98:20:f6:7f:fb:51:
                    8c:1b:81:7f:34:c1:54:0e:d6:1c:94:3f:7e:02:36:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.138.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42134

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:fc:7c:4a:90:09:9e:d5:22:d3:5a:06:7e:39:78:90:1e:
         2a:9f:21:84:ee:7e:da:0b:0b:cd:9b:e8:ce:a4:1d:e6:ae:f7:
         6d:d8:8c:99:1a:b9:1b:cc:0c:8c:76:9e:0d:57:df:ee:f1:17:
         e4:4f:1f:e7:76:f2:c7:c7:9b:51:91:b0:f5:98:c8:34:01:c6:
         38:14:27:85:5b:75:ed:68:89:8e:bf:ed:e8:c8:75:0a:9c:ff:
         da:41:0f:1c:23:a2:1a:3b:48:1a:c0:d3:97:41:ec:b6:5e:3a:
         6d:9a:42:23:12:8c:e9:54:4e:d5:e4:65:69:1f:c1:fb:bd:d9:
         d9:82:a8:96:44:42:a7:24:0b:b3:b4:62:19:18:1b:61:71:ac:
         0f:03:9c:3b:6f:b7:60:e6:d9:95:78:04:26:dc:44:fa:06:34:
         88:55:3e:91:04:2c:a5:a3:fa:75:1c:b0:b3:2b:0f:62:0c:e7:
         2a:92:5b:a4:cd:a0:df:b3:29:82:9a:75:99:cf:84:64:8b:73:
         90:22:ec:06:a5:0b:fc:3e:2f:6c:b7:22:a6:50:40:7e:d7:b4:
         6b:32:97:df:f7:d4:b1:17:ac:b8:ca:ef:ce:d3:c6:f1:21:31:
         ac:65:31:c6:c1:fe:b1:b3:06:da:32:1b:8a:34:04:7f:91:e3:
         2a:dd:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:07:33 2026 by rpki-client